What is claimed is; 

1. A master digital data creation device comprising: 
an encryption block generating a first control word based 

5 on a specified allowable number of reproductions and applying 
a one-way function to the first control word the allowable 
number of reproductions to generate a second control word; 

a scrambler receiving the second control word for 
scrambling desired first digital data using the second control 
10 word to produce second digital data; and 

an output block outputting the second digital data and 
the first control word to an external device. 

2. A digital data reproduction device comprising: 
15 an acceptor accepting recording media on which second 

digital data and a first control word CW k are recorded, said 
first control word being generated based on a specified 
allowable number of reproductions, said second digital data 
being generated by scrambling desired first digital data using 

20 a second control word CW 0 generated by applying a one-way 
function to the first control word CW k k times; 

a decryption block receiving the first control word CW* 
and applying the one-way function to the first control word 
CW K k times to produce the second control work CW 0 ; 

25 a de- scrambler receiving the second digital data and 

the second control word CW 0 and de - scrambling the second digital 
data using the second control word CW 0 to produce the first 
digital data; and 

a reproduction unit reproducing the first digital data 

30 generated by said de -scrambler, 

wherein, after the reproduction by said reproduction 
unit, said decryption block writes a third control word CW( k -i) 
back to said recording media, said third control word CW(k-i) 
being generated by applying the one-way function to the first 

35 control word CW k once, and wherein, if the first control word 
CW k received from the recording media equals the second control 
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word CW 0 , the de- scrambling by said de-scrambler and the 
reproduction by said reproduction unit are inhibited. 

3. The digital data reproduction device according to 
5 claim 2, wherein, when a desired number of reproductions, n, 
is received from some other reproduction device, said 
decryption block receives the first control word CW k from the 
recording media and, if k^n, applies the one-way function 
to the first control word CW k (k-n) times to produce the third 

10 control word CW n and applies the one-way function to the first 
control word CW k n times to produce the fourth control word 
CW(K-n) ; if k<n, produces the first control word CW k as the third 
control word CW n and produces the second control word CW 0 as 
the fourth control word CW (k - n) ; and records the fourth control 

15 word CW(K-n) on the recording media for updating, further 
comprising: 

an output block outputting the second digital data 
recorded on the recording media, and the third control word 
CW n obtained from the decryption block, to the other 
20 reproduction device. 



-15- 



